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(54) Super encrypted storage and retrieval of media programs in a hard-paired receiver and 
storage device 

(57) A method and apparatus for storing and retriev- 
ing program material forsubsequent replay is disclosed. 
The apparatus comprises a tuner (410), for receiving a 
data stream comprising encrypted access control infor- 
mation and the program material encrypted according 
to a first (CW) encryption key the access control infor- 
mation including the first encryption key; a first encryp- 
tion module (552), communicatively coupled to the tuner 
(41 0) and communicatively coupleable to a media stor- 
age device (524), for further encrypting the encrypted 
program material according to a second encryption key 
(514) and for encrypting the second encryption key 
(514) according to a third encryption key (518) to pro- 
duce a fourth encryption key (520); a first decryption 
module (550) communicatively coupleable to the media 
storage device (524), for decrypting the fourth encryp- 
tion key (520) retrieved from the media storage device 
(524) using the third encryption key (51 8) to produce the 
second encryption key (51 4), and for decrypting the fur- 
ther encrypted program material (510) retrieved from 
the media program device (524) to produce the encrypt- 
ed program material (514); a conditional access module 
(406) communicatively coupled to the first decryption 
module (552), for decrypting the encrypted access con- 
trol information to produce the first (CW) encryption key; 
and a second decryption module (540), for decrypting 
the program material using the first (CW) encryption key. 
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Description 

CROSS-REFERENCE TO RELATED APPLICATIONS 

[0001] This application is related to the following pat- 
ent applications, all of which applications are hereby in- 
corporated by reference herein: 

U.S. Patent Application Serial No. --/—,—, entitled 
"SECURE STORAGE AND REPLAY OF MEDIA 
PROGRAMS USING A HARD-PAIRED RECEIVER 
AND STORAGE DEVICE," by Raynold M. Kahn, 
Gregory J. Gagnon, David D. Ha, Peter M. Klauss, 
Christopher P. Curren, and Thomas H. James, at- 
torney's docket number PD-200042, filed on same 
date herewith; 

U.S. Patent Application Serial No. --/--,—, entitled 
"SUPER ENCRYPTED STORAGE AND RETRIEV- 
AL OF MEDIA PROGRAMS WITH MODIFIED 
CONDITIONAL ACCESS FUNCTIONALITY, " by 
Raynold M. Kahn, Gregory J. Gagnon, David D. Ha, 
Peter M. Klauss, Christopher P. Curren, and Tho- 
mas H. James, attorney's docket number PD- 
200044, filed on same date herewith; 
U.S. Patent Application Serial No. -/—,—, entitled 
"SUPER ENCRYPTED STORAGE AND RETRIEV- 
AL OF MEDIA PROGRAMS WITH SMARTCARD 
GENERATED KEYS," by Raynold M. Kahn, Grego- 
ry J. Gagnon, David D. Ha, Peter M. Klauss, Chris- 
topher P. Curren, and Thomas H. James, attorney's 
docket number PD-200045, filed on same date 
herewith; 

U.S. Patent Application Serial No. --/—,—, entitled 
"VIDEO ON DEMAND PAY PER VIEW SERVICES 
WITH UNMODIFIED CONDITIONAL ACCESS 
FUNCTIONALITY" by Raynold M. Kahn, Gregory J. 
Gagnon, David D. Ha, PeterM. Klauss, Christopher 
P. Curren, and Thomas H. James, attorney's docket 
number PD-200055, filed on same date herewith; 
and 

U.S. Patent Application Serial No. 09/491 ,959, en- 
titled "VIRTUAL VIDEO ON DEMAND USING MUL- 
TIPLE ENCRYPTED VIDEO SEGMENTS," by 
Robert G. Arsenault and Leon J. Stanger, attorney's 
docket number PD-980208, filed on January 26, 
2000. 

BACKGROUND OF THE INVENTION 
1. Field of the Invention 

[0002] The present invention relates to systems and 
methods for providing video program material to sub- 
scribers, and in particular to a method and system for 
securely storing and replaying media programs. 



[0003] In recent years, there has been increasing in- 
terest in allowing cable and satellite television subscrib- 
s ers to record broadcast media programs for later view- 
ing. This capability, hereinafter referred to as personal 
video recording (PVR), can be used to provide video- 
on-demand (VOD) services, or simply to allow the sub- 
scriber to save media programs for repeated viewing 
10 and/or archival purposes. 

[0004] In the past, video cassette tape recorders 
(VCRs) have been used for such personal video record- 
ing. Recently, however, hard disks, similar to those used 
in personal computers, have been used to store media 
15 programs for later viewing. Unlike VCRs, such devices 
typically do not include a tuner, and are instead coupled 
to the satellite receiver or cable box. Also unlike VCRs, 
these devices are typically used to record digital con- 
tent, not analog video. This difference is both advanta- 
geous and disadvantageous. 

[0005] An advantage of such devices is that they per- 
mit long term storage and multiple replays without sub- 
stantial degradation. Another advantage is that they per- 
mit more rapid trick-play functions such as fast forward- 
ing and rewinding. A disadvantage of such devices is 
that they are capable of making multiple-generation 
copies of the program material as well, and without se- 
rious degradation. This raises the very real possibility 
that the multiple generation copies of the media pro- 
grams will be produced and distributed without permis- 
sion. This possibility has caused some media providers 
to be reluctant to allow their media programs to be re- 
corded by such devices. 

[0006] To ameliorate this problem, it is critical to pro- 
tect the stored media programs with strong security and 
copy control. Current devices do not scramble media 
programs before storage, nor do they store copy protec- 
tion information. Instead, such devices record decrypted 
program content into the storage disk using a paired 
hardware scheme in which the hard disk controller and 
hard disk are paired to each other specifically through 
a specific interface. Because the hard disk controller 
and the disk itself are essentially paired together, stor- 
age or playback will not function if the disk were to be 
removed and transferred to another player. The weak- 
ness of this security scheme is that it relies only on the 
paired hardware to ensure security... the media pro- 
grams stored on the disk drive itself are not encrypted. 
[0007] While it would presumably be possible to sim- 
ply store the datastream as it is received from the broad- 
caster for later replay, this technique has distinct disad- 
vantages. One such disadvantage is that it would pro- 
vide pirates a permanently recorded version of the en- 
crypted datastream, thus providing the pirate with infor- 
mation that can be used to perform detailed analyses of 
the datastream itself to determine the encryption tech- 
niques and codes. 

[0008] What is needed is a system and method for se- 
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curely recording broadcast media programs (including 
impulse purchase pay-per-view programs) for limited 
use playback at a later time. Such a system could be 
used to support video-on-demand (VOD), thus allowing 
the subscriber to purchase media programs and games 
from the set top box instantly without worrying about the 
start time of the program. What is also needed is a sys- 
tem and method that does not require substantial 
changes to subscriber hardware, such as the integrated 
receiver/decoder (IRD), or the conditional access mod- 
ule (CAM) that is used to provide a key to decrypt the 
media programs for presentation to the subscribers. 

SUMMARY OF THE INVENTION 

[0009] In summary, the present invention describes a 
system and method for storing and retrieving program 
material for subsequent replay. The method comprises 
the sleps of receiving a data stream comprising the pro- 
gram material encrypted according to a first encryption 
key and control data, the control data comprising the first 
encryption key and being encrypted; further encrypting 
the encrypted program material according to a second 
encryption key; encrypting the second encryption key 
according to a third encryption key to produce a fourth 
encryption key; storing the further encrypted program 
material and control data and the fourth encryption key. 
[001 0] The apparatus comprises a tuner, for receiving 
a data stream comprising encrypted access control in- 
formation and the program material encrypted accord- 
ing to a first encryption key, the access control informa- 
tion including the first encryption key; a first encryption 
module, communicatively coupled to the tuner and com- 
municatively coupleable to a media storage device, for 
further encrypting the encrypted program material ac- 
cording to a second encryption key and for encrypting 
the second encryption key according to a third encryp- 
tion key to produce a fourth encryption key; a first de- 
cryption module communicatively coupleable to the me- 
dia storage device, for decrypting the fourth encryption 
key retrieved from the media storage device using the 
third encryption key to produce the second encryption 
key, and for decrypting the further encrypted program 
material retrieved from the media program device to pro- 
duce the encrypted program material; a conditional ac- 
cess module communicatively coupled to the first de- 
cryption module, for decrypting the encrypted access 
control information to produce the first encryption key; 
and a second decryption module, for decrypting the pro- 
gram material using the first encryption key. 
[0011] One object of the present invention is to pro- 
vide a system allowing for growth to pay-por-play or true 
video-on-demand (VOD) services from media programs 
stored on a hard disk. The pay-per-play service allows 
the subscriber to select media programs or games from 
the realtime broadcast data or from the media programs 
stored on the disk. VOD service permits the subscriber 
to purchase provided media programs and games from 



the subscriber's receiver instantly, without regard to the 
start time of the program. 

[0012] Another object of the present invention is to 
provide for the reception and decryption of broadcast 

5 media programs, including impulse pay-per-view (I PPV) 
programs, that can be played and recorded onto storage 
media and allows playback at a later time with limited 
use. The data itself may be placed in short term storage, 
but the replay of the media programs can be accom- 

10 plished with trick play functions such as forward, re- 
verse, fast forward, fast reverse, frame advance, and 
pause functions. 

[0013] Another object of the present invention is to 
provide PVR functions which provide recording, delayed 
15 playback, and trick play of IPPV media programs from 
the storage media without requiring a pre-purchase of 
the IPPV media program. This would allow the I PPV me- 
dia program to be viewed without requiring the I PPV me- 
dia program lo be purchased prior to storage. Ideally, 
such a system would allow the user to select the IPPV 
media program from the storage device, subject to lim- 
ited play rights. 

[0014] Still another object of the present invention is 
to provide a pairing between the storage media and eU 
ements of the subscriber's IRD to assure that playback 
of the media programs from the storage device are per-, 
mitted only with the proper IRD. 

[0015] Still another object of the present invention is 
to provide a secure means for storing broadcast data 
streams (including IPPV and games) on a data storage 
device, while providing for adequate copy protection. 
[0016] Still another object of the present invention is 
to provide a system and method for handling the archiv- 
ing and retrieving of media programs and other data, 
even if the data storage device fails. 
[0017] Still another object of the present invention is 
to provide a system and method that allows media pro- 
gram purchases to be recorded in a way that is analo- 
gous to that which is employed for real-time off-the-air 
programs. 

[0018] Still another object of the present invention is 
to provide a system that provides a growth path to a sys- 
tem permitting IPPV media programs to be previewed 
without charge for an initial period of time with the option 
to purchase the media program or cancel the purchase, 
regardless of whether the program is retrieved from the 
storage device or obtained from a real time broadcast. 
[0019] The present invention eliminates concerns re- 
garding the proliferation of unauthorized digital copies 
of the media programs by use of a strong encryption 
method. Further, the present invention ensures that the 
stored material cannot be distributed since such decryp- 
tion of the material can only be successfully performed 
by the encrypting IRD. At the same time, the present 
invention can be implemented with minimal changes to 
the IRD, and no changes to the CAM interface. The 
present invention also provides a basis for a growth path 
to more advanced encryption/decryption techniques. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[0020] Referring now to the drawings in which like ref- 
erence numbers represent corresponding parts 
throughout: 

FIG. 1 is a diagram showing an overview of a video 
distribution system; 

FIG. 2 is a block diagram showing a typical uplink 
configuration showing how video program material 
is uplinked to a satellite for transmission to subscrib- 
ers using a single transponder; 
FIG. 3A is a diagram of a representative data 
stream received from a satellite; 
FIG. 3B is a diagram illustrating the structure of a 
data packet; 

FIG. 4 is a block diagram illustrating a high-level 
block diagram of the IRD: 
FIG. 5 is a diagram illustrating the storage and re- 
trieval of data from a media storage device; and 
FIG. 6 is a diagram illustrating the storage and re- 
trieval of data from the media storage device in an 
alternative embodiment of the invention. 

DETAILED DESCRIPTION OF PREFERRED 
EMBODIMENTS 

[0021] In the following description, reference is made 
to the accompanying drawings which form a part hereof, 
and which show, by way of illustration, several embod- 
iments of the present invention . It is understood that oth- 
er embodiments may be utilized and structural changes 
may be made without departing from the scope of the 
present invention. 

VIDEO DISTRIBUTION SYSTEM 

[0022] FIG. 1 is a diagram illustrating an overview of 
a video distribution system 100. The video distribution 
system 100 comprises a control center 102 in commu- 
nication with an uplink center 1 04 via a ground or other 
link 114 and an integrated receiver/decoder (IRD) 132 
at receiver station 130 via a public switched telephone 
network (PSTN) or other link 1 20. The control center 1 02 
provides program material to the uplink center 104, co- 
ordinates with the receiver station 1 30 to offer subscrib- 
ers 1 1 0 pay-per-view (PPV) program services, including 
billing and associated decryption of video programs. 
[0023] The uplink center 1 04 receives program mate- 
rial and program control information from the control 
center 102, and using an uplink antenna 106, transmits 
the program material and program control information 
to the satellite 108. The satellite 1 08 receives and proc- 
esses this information, and transmits the video pro- 
grams and control information to the IRD 132 at the re- 
ceiver station 130 via downlink 118. The IRD 132 re- 
ceives this information using the subscriber antenna 1 1 2 
to which it is communicatively coupled. 



[0024] The video distribution system 100 can com- 
prise a plurality of satellites 108 in order to provide wider 
terrestrial coverage, to provide additional channels, or 
to provide additional bandwidth per channel. In one em- 

5 bodiment of the invention, each satellite comprises 16 
transponders to receive and transmit program material 
and other control data from the uplink center 104 and 
provide it to the subscribers 110. However, using data 
compression and multiplexing techniques the channel 

10 capabilities are far greater. For example, two-satellites 
108 working together can receive and broadcast over 
150 conventional (non-HDTV) audio and video chan- 
nels via 32 transponders. 

[0025] While the invention disclosed herein will be de- 
15 scribed with reference to a satellite based video distri- 
bution system 100, the present invention may also be 
practiced with terrestrial-based transmission of program 
information , whether by traditional broadcasting means, 
cable, or other means. Further, the different functions 
collectively allocated among the control center 102 and 
the uplink center 104 as described above can be real- 
located as desired without departing from the intended 
scope of the present invention. 
[0026] Although the foregoing has been described 
with respect to an embodiment in which the program 
material delivered to the subscriber is video (and audio) 
program material such as a movie, the foregoing meth- 
od can be used to deliver program material comprising 
purely audio information or data as well. 
[0027] FIG. 2 is a block diagram showing a typical up- 
link configuration for a single satellite 108 transponder, 
showing how video program material is uplinked to the 
satellite 108 by the control center 102 and the uplink 
center 104. FIG. 2 shows three video channels (which 
could be augmented respectively with one or more au- 
dio channels for high fidelity music, soundtrack informa- 
tion, or a secondary audio program for transmitting for- 
eign languages), and a data channel from a computer 
data source 206. 

[0028] The video channels are provided by a program 
source of video material 200A-200C (collectively re- 
ferred to hereinafter as video source(s) 200). The data 
from each video program source 200 is provided to an 
encoder 202A-202C (collectively referred to hereinafter 
as encoder(s) 202). Each of the encoders accepts a 
presentation time stamp (PTS) from the controller 21 6. 
The PTS is a wrap-around binary time stamp lhal is used 
to assure that the video information is properly synchro- 
nized with the audio information after encoding and de- 
coding. A PTS time stamp is sent with each I -frame of 
the MPEG encoded data. 

[0029] In one embodiment of the present invention, 
each encoder 202 is a second generation Motion Picture 
Experts Group (MPEG-2) encoder, but other decoders 
implementing other coding techniques can be used as 
well. The data channel can be subjected to a similar 
compression scheme by an encoder (not shown), but 
such compression is usually either unnecessary, or per- 



25 



30 



35 



40 



45 



50 



SOOCID: <EP 1 176826A2_I_> 



4 



7 



EP 1 176 826 A2 



8 



formed by computer programs in the computer data 
source (for example, photographic data is typically com- 
pressed into *.TIF files or *.JPG files before transmis- 
sion). After encoding by the encoders 202, the signals 
are converted into data packets by a packetizer 204A- 
204F (collectively referred to hereinafter as packetizer 
(s) 204) associated with each source 200, 206-210. 
[0030] The data packets are assembled using a ref- 
erence from the system clock 21 4 (SCR), a control word 
(CW) generated by the conditional access manager 
208, and a system channel identifier (SCO) generator 
210 that associates each of the data packets that are 
broadcast to the subscriber with a program channel. 
This information is transmitted to the packetizers 204 for 
use in generating the data packets. These data packets 
are then multiplexed into serial data, encoded, modulat- 
ed, and transmitted. A special packet known as a control 
word packet (CWP) which comprises control data in- 
cluding the control word (CW) and other control data 
used in support of providing conditional access to the 
program material is also encrypted and transmitted. 
[0031] FIG. 3A is a diagram of a representative data 
stream. The first packet segment 302 comprises infor- 
mation from video channel 1 (data coming from, for ex- 
ample, the first video program source 200A). The next 
packet segment 304 comprises computer data informa- 
tion that was obtained, for example from the computer 
data source 206. The next packet segment 306 com- 
prises information from video channel 5 (from one of the 
video program sources 200), and the next packet seg- 
ment includes information from video channel 1 (again, 
coming from the first video program source 200A). The 
data stream therefore comprises a series of packets 
from any one of the data sources in an order determined 
by the controller 216. The data stream is encrypted by 
the encryption module 21 8, modulated by the modulator 
220 (typically using a QPSK modulation scheme), and 
provided to the transmitter 222, which broadcasts the 
modulated data stream on a frequency bandwidth to the 
satellite via the antenna 106. 

[0032] Subscribers 1 1 0 receive media programs via a 
subscriber receiver or IRD 1 32. Using the SCID, the IRD 
1 32 reassembles the packets to regenerate the program 
material for each of the channels. As shown in FIG. 3A, 
null packets created by the null packet module 31 2 may 
be inserted into the data stream as desired. 
[0033] FIG. 3B is a diagram of a data packet. Each 
data packet (e.g. 302-316) is 147 bytes long, and com- 
prises a number of packet segments. The first packet 
segment 320 comprises two bytes of information con- 
taining the SCID and flags. The SCID is a unique 1 2-bit 
number that uniquely identifies the data packet's data 
channel. The flags include 4 bits that are used to control 
whether the packet is encrypted, and what key must be 
used to decrypt the packet. The second packet segment 
322 is made up of a 4-bit packet type indicator and a 4 
-bit continuity counter. The packet type identifies the 
packet as one of the four data types (video, audio, data, 



or null). When combined with the SCID, the packet type 
determines how the data packet will be used. The con- 
tinuity counter increments once for each packet type 
and SCID . The next packet segment 324 comprises 1 27 
5 bytes of payload data, which is a portion of the video 
program provided by the video program source 200. The 
final packet segment 326 is data required to perform for- 
ward error correction. 

10 ENCRYPTION OF MEDIA PROGRAMS 

[0034] Media programs are encrypted by the encryp- 
tion module 218 before transmission to assure that they 
are received and viewed only by authorized subscribers. 

is Each media program is encrypted according to an al- 
phanumeric encryption key referred to hereinafter as a 
control word (CW). This can be accomplished by a va- 
riety of data encryption techniques, including the data 
encryption standard (DES) and the Rivest-Shamir-Adle- 

20 man (RSA) algorithm. 

[0035] To decrypt the media programs, the subscrib- 
er's 110 IRD 132 must also have access to the CW. To 
maintain security, CWs are not transmitted to the IRD 
132 plaintext. Instead, CWs are encrypted before trans- 

25 mission to the subscriber's IRD 1 32. The encrypted CW, 
is transmitted to the subscriber's IRD 132 in a control 
word (data) packet. 

[0036] In one embodiment, the data in the CWP, in- 
cluding the CW, is encrypted and decrypted via what is 
30 referred to hereinafter as an input/output (I/O) indeci- 
pherable algorithm. 

[0037] An I/O indecipherable algorithm is an algorithm 
that is applied to an input data stream to produce an 
output data stream. Although the input data stream 

35 uniquely determines the output data stream, the algo- 
rithm selected is such that it's characteristics cannot be 
deciphered from a comparison of even a large number 
of input and output data streams. The security of this 
algorithm can be further increased by adding additional 

40 functional elements which are non-stationary (that is, 
they change as a function of time). When such an algo- 
rithm is provided with identical input streams : the output 
stream provided at a given point in time may be different 
than the output stream provided at another time. 

45 [0038] So long as the encryption module 21 8 and the 
IRD 132 share the same I/O indecipherable algorithm, 
the IRD 132 can decode the information in the CWP to 
retrieve the CW. Then, using the CW, the IRD 132 can 
decrypt the media program so that it can be presented 

50 to the subscriber 1 1 0. 

[0039] To further discourage piracy, the control data 
needed to decrypt and assemble data packets into view- 
able media programs may be time-varying (the validity 
of the control data in a CWP to decode a particular me- 

55 dia program changes with time). This can be implement- 
ed in a variety of ways. 

[0040] For example, since each CWP is associated 
with a SCID for each media program, the SCID related 
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to each CWP could change overtime. 
[0041] Another way to implement time-varying control 
data is to associate time stamps with the received data 
stream and the CWP control data. In this case, success- 
ful decoding of the CWP to produce the CW would re- 
quire the proper relationship between the time stamps 
for the data stream and the control data in the CWP. This 
relationship can be defined, for example, by changing ' 
the decryption scheme used to generate the CW from 
the CWP according to the received time stamp for the 
data stream. In this case, if the time stamp of the re- 
ceived data stream does not match the expected value, 
the wrong decryption scheme will be selected and the 
proper CW (to decrypt the program material) will not be 
produced. If, however, the time stamp of the received 
data stream matches the expected value, the proper de- 
cryption scheme will be selected, and the CWP decryp- 
tion scheme will yield the proper CW. 

REQUESTING PAY-PER-VIEW SERVICES 

[0042] The data required to receive pay-per-view 
(PPV) media programs are stored in the CWP and in 
another data packet known as the purchase information 
parcel (PIP). Both the CWP and the PIP are broadcast 
to the subscriber via the video distribution system 100 
in real time. As described below, the CWP is used by 
the IRD 132 to retrieve PPV media programs. 
[0043] Generally, PPV services can include operator- 
assisted pay-per-view (OPPV) and impulse pay-per- 
view (IPPV) services. When requesting OPPV services, 
the subscriber 1 1 0 must decide in advance that they de- 
sire access to a particular media program. The subscrib- 
er 110 then calls an entity such as the control center 
102, and requests access to the media program. When 
requesting impulse pay-per-view services (IPPV), the 
subscriber 1 1 0, while viewing the program guide, moves 
the cursor over the viewer channel associated with the 
desired media program, and selects "enter. " After the 
decision and rights to purchase a PPV program are con- 
firmed (for example, by checking channel lockouts, rat- 
ing limits, and purchase limits), a purchase information 
parcel (PIP) is received and stored in the subscriber's 
conditional access module 406 (which is described in 
more detail below) for further use. The conditional ac- 
cess module 406 associates the information in the CWP 
and the PIP, and uses Ihe PIP in conjunction with the 
CWP to verify that the subscriber 110 should be provid- 
ed access to the media program and to decrypt the me- 
dia program. 

[0044] Ordering PPV media programs in advance us- 
ing the PIP is limited, however, since the PIP is broad- 
cast up to 24 hours before the media program itself is 
broadcast. Since the PIP is broadcast in real time, the 
IRD 132 does not acquire the PIP until the subscriber 
110 actually requests the PPV media program pur- 
chase. 



10 

SUBSCRIBER RECEPTION AND DECRYPTION OF 
MEDIA PROGRAMS 

[0045] FIG. 4 is a simplified block diagram of an IRD 
5 1 32. The I RD 1 32 receives and decrypts the media pro- 
grams broadcast by the video distribution system 100. 
These media programs are streamed to the IRD 132 in 
real time, and may include, for example, video, audio, 
or data services. 
10 [0046] The IRD 132 is communicatively coupleable to 
a conditional access module (CAM) 406. The CAM 406 
is typically implemented in a smart card or similar de- 
vice, which is provided to the subscriber 110 to be in- 
serted into the IRD 132. The CAM 406 interfaces with a 
15 conditional access verifier (CAV) 408 which performs at 
least some of the functions necessary to verify that the 
subscriber 1 1 0 is entitled to access the media programs. 
The CAV 408 is communicatively coupled to a metadata 
analysis module (MAM) 411. Using the information in 
metadata table (e.g. Table 1 described below), the MAM 

411 acts as a gate-keeper to determine whether stored 
media programs will be decrypted and presented to the 
subscriber 110. This is accomplished by comparing the 
metadata values with measured or accumulated values. 
The CAV 408 and the MAM 41 1 can be implemented as 
separate modules from the transport/demux/decryptor 

412 and the microcontroller and memory 414 as shown, 
or may be implemented via software instructions stored 
in the memory and performed by the microcontroller 
414. 

[0047] The IRD 132 comprises a tuner 410, a trans- 
port and demultiplexing module (TDM) 412, which op- 
erates under control of a microcontroller and associated 
memory 414, a source decoder 416 and communica- 
tively coupled random access memory (RAM) 41 8 : and 
a user I/O device for accepting subscriber 110 com- 
mands and for providing output information to the sub- 
scriber. 

[0048] The tuner receives the data packets from the 
video distribution system and provides the packets to 
the TDM 412. Using the SCIDs associated with each 
media program, the TDM 412 reassembles the data 
packets according to the channel selected by the sub- 
scriber 110, and unencrypts the media programs using 
the CW key. The TDM 412 can be implemented by a 
single secure chip, and is communicatively coupled to 
a microcontroller and memory 414. 
[0049] Once the media programs are unencrypted, 
they are provided to the source decoder 416 which de- 
codes the media program data according to MPEG or 
JPEG standards as appropriate. The decoded media 
program is then provided to a D/A converter (if neces- 
sary) and provided to external interlaces 404 which can 
include a media program presentation device such as a 
television, an audio system, or a computer. The source 
decoder 41 6 makes use of communicatively coupled 
RAM 41 8 to perform these functions. 
[0050] The CW key is obtained from the CWP using 
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the CAV 408 and the CAM 406. The TDM 412 provides 
the CWP to the CAM 406 via the CAV 408. The CAM 
406 uses the I/O indecipherable algorithm to generate 
the CW, which is provided back to the TDM 412. The 
TDM 412 uses the CW to decrypt the media programs. 
In most IRDs 132, the CAV 408 and the CAM 406 are 
capable of decrypting one video/audio/data media pro- 
gram at a time. 

[0051 ] As described above, to discourage potential pi- 
rates, the control data in the CWP used to decode a par- 
ticular media program may change with time so that it 
only produces the proper CW when applied to a media 
program having the propertime stamp. In this case, the 
CAM 406 can select and/or control the decryption 
scheme (e.g. the I/O indecipherable algorithm) accord- 
ing to the time stamp associated with the data stream 
carrying the media program. If the media program is suf- 
ficiently disassociated in time, the improper decryption 
scheme will be used, and the proper CW to decode the 
media program will not be produced. 
[0052] Further details regarding the encryption and 
decryption of media programs can be found in co-pend- 
ing and commonly assigned U.S. Patent Application Se- 
rial No. 09/491,959. 

STORAGE AND RETRIEVAL OF MEDIA PROGRAMS 
IN ENCRYPTED FORM 

[0053] FIG. 5 is a diagram presenting exemplary 
method steps used to practice one embodiment of the 
present invention. A data stream is provided by sub- 
scriber antenna 112 and received by the tuner 41 0 and 
the TDM 412, as shown in block 502. The data stream 
includes a plurality of data packets including data pack- 
ets with the program material 504 encrypted according 
to a first encryption key (CW key 538) and access con- 
trol information which is manifested within one or more 
control word packets (CWP 506). The control word 
packets 506 include an encrypted version of the CW key 
538. The data stream may also include metadata having 
replay rights. The replay rights are parameters neces- 
sary for controlling the replay of IPPV or pay-per-play 
services. 

[0054] The encrypted program material 504 (denoted 
Encrypted V/A/D in FIG. 5 to indicate that the program 
material can include video, audio, or other data) is then 
provided to a first encryption module 552. The first en- 
cryption module 552 includes a storage encryption mod- 
ule 508 and a key encryption module (KEM) 516. The 
CP encryption module 508 encrypts the encrypted pro- 
gram material 504 (thus further encrypting the encrypt- 
ed program material 504) and the CWP 506 with a copy 
protection (CP) key 514. In one embodiment, this is ac- 
complished via a triple 56 bit Data Encryption Standard 
(DES) cipher block chaining (CBC). RSA encryption 
may also be used, but triple DES is temporally more ef- 
ficient, and is therefore preferred. 
[0055] I n one embodiment, the CP key 51 4 is derived 



using a CP generation module 546 from the properties 
of the replay rights and other metadata in the broadcast 
stream. Depending on the metadata, the CP key 514 
may also be time variant with the broadcast program 

5 material. In another embodiment, the CP key may be 
augmented with at least a portion of the metadata before 
being encrypted with the box key 518 in the KEM 516 
and stored in the media storage device as the encrypted 
CP key 520. In this embodiment, when the encrypted 

10 CP key 520 is decrypted, the CP key and related meta- 
data are both produced. The metadata can then be used 
to verify and/or control replay of the program material. 
The CP key 514 may also be internally generated by the 
IRD 132 without the metadata. 

15 [0056] The key encryption module 51 6 also encrypts 
the CP key 514 with the box key 518 to produce an en- 
crypted CP key 520. In one embodiment, the box key 
518 is stored within the IRD 132. For example, the box 
key 518 could be an internal electronic serial number 

20 (ESN) of an integrated circuit implementing some or ail 
of the functions of the TDM 41 2 (hereinafter, the "trans- 
port chip"). Incorporating the ESN into the encryption 
key ensures that only that IRD 132 that stored the en- 
crypted information in the media storage device can 

25 successfully decrypt the stream. V 
[0057] The further encrypted program material 51 0, 
the encrypted CWP 512, and the encrypted C P key 520 
is then stored 522 in the media storage device 524. The 
media storage device 524 is typically a hard drive, but 

30 may be any device with sufficient capacity and access 
time to support recording and/or playback operations of 
the data stored therein. 

[0058] When the subscriber 1 1 0 decides to play back 
the stored media programs, an appropriate user input is 

35 provided on the user I/O device 420. The user input may 
comprise a play command, a fast forward command/a 
reverse command, a fast play or fast reverse play com- 
mand, or a pause command. In response to the user 
input, the stored data is retrieved from the media storage 

40 device 524. This data includes the further encrypted pro- 
gram material 510, the encrypted CWP 512, and the en- 
crypted CP key 520. The encrypted CP key 520 is de- 
crypted using the box key 518 to produce the CP key 
514. This CP key 514 is used to decrypt the further en- 

45 crypted media program material 510 and the encrypted 
CWP 51 2 to produce the encrypted media program 504 
and the CWP 506, respectively The CWP 506 is pro- 
vided to the CAM 406. 

[0059] The IPPV control module 532 determines 
50 whether the requested media program is a PPV pro- 
gram (IPPV or OPPV). If so, the subscriber 110 is in- 
formed that the media program selected is a PPV pro- 
gram. If the subscriber 110 elects to receive the PPV 
program, a PPV request is accepted, and the purchase 
55 history module 534 collects and records the information 
regarding the requested program material so that the 
subscriber 110 can be billed for viewing the media pro- 
gram. In one embodiment, the PPV request is compared 
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to the replay right information in the metadata to deter- 
mine if the program material that is the subject of the 
PPV request should be decrypted and provided. For ex- 
ample, the replay right metadata could be used to indi- 
cate that the program could be viewed for a specific pe- 
riod of time, or for a particular number of showings. 
[0060] The CWP 506 is then provided to the CW ex- 
traction module 536, which produces the CW key 538. 
In one embodiment, this is accomplished in the CAM 
406 via application of the I/O indecipherable algorithm 
discussed above. Using the CW key 538, the encrypted 
program material 504 is decrypted to produce a clear 
version of the media program 542. 
[0061] Using the foregoing scheme, the encrypted 
program material and the CWP 506 must be tracked and 
correlated during decryption by the IRD 132. This may 
be accomplished by correlation through time stamps, 
and/or MPEG I and P frames. Since each playback of 
program requires the CP decryption (via CP key 538) 
and the CA decryption (via CW) process, the decryption 
may be slowed enough to cause video lagging or blank 
out during trick play functions. This problem could be 
minimized by setting aside sufficient buffer memory to 
handle the decoded video. 

[0062] After suitable processing (i.e. MPEG and or 
JPEG decoding, decompression, conversion to an an- 
alog signal etc.), the media program is provided to an 
external interface 404 device, which may include a pres- 
entation device such as a display 544. 
[0063] In one embodiment of the present invention, 
the data stream received in IRD 132 further comprises 
metadata including data to control replay rights and 
copy protection. This metadata can be encrypted by the 
CP encrypt module 552 and stored in the media storage 
device 524 for later decryption and use when a request 
to view the media program is received. Alternatively, the 
metadata can be encrypted and broadcast in the data 
stream in real time for all PPV-enabled media programs, 
thus obviating the need for storing the information in the 
media storage device 524. 

[0064] As described above, the relationship between 
the CWP 506 and the encrypted media program may be 
time-varying. However, in the nominal case described 
above, since both the CWP 506 and the encrypted pro- 
gram material 504 associated with the same time 
stamps are stored, replay of the stored material can be 
performed without modification lo either the time stamps 
or the CWP 506. However, if temporally-limited replay 
rights are desired, the time stamps or associated with 
the CWP 506 or the CWP 506 itself may be modified 
prior to storage. 

[0065] Although the foregoing has been described 
with respect to a plurality of encryption modules (e.g. 
modules 508 and 516) and decryption modules (e.g. 
modules 528 and 530), the present invention can be im- 
plemented with single encryption module, a single de- 
cryption module, or a single encryption/decryption mod- 
ule. In one embodiment of the present invention, the op- 



erations performed by modules 508, 51 6, 528, and 530, 
are performed in a single integrated circuit device such 
as the transport chip. 

[0066] FIG. 6 is diagram presenting an alternative em- 
5 bodiment of the present invention in which the CWP 506 
is stored in the media storage device without encryption 
by the CP key 514. In this embodiment, the CWP 506 
is read from the media storage device 524 and provided 
to the CAM 406, and need not be decrypted using the 
10 CP key 51 4. One advantage of this embodiment is that 
it requires fewer encryption and decryption operations, 
thus allowing the program materials to be more quickly 
stored and retrieved from the media storage device and 
presented to the user. This embodiment is particularly 
'5 advantageous for embodiments using trick play fea- 
tures. 

Conclusion 

20 [0067] The present invention describes encryption 
and decryption functions that enhance the security of 
the data stored on the disk drive by further encrypting 
(with a CP or copy protection key) the already encrypted 
program material comprising a video/audio/data MPEG 
25 stream before storage. These encryption and decryp- 
tion functions are provided by IRD 1 32, preferably within 
the transport chip. Since the broadcast data stream is 
not decrypted before storage on the media storage de- 
vice ; but rather further encrypted, a clear version is not 
30 exposed to possible compromise before storage on the 
media storage device. Further, since the encrypted 
broadcast stream is further encrypted before storage, 
the encrypted broadcast stream is not available for po- 
tential pirates to analyze to try to break the broadcast 
35 stream encryption scheme. 

[0068] In one embodiment, metadata is included in 
the data stream broadcast to the IRD 132. This meta- 
data includes replay rights and other parameters nec- 
essary for controlling the replay of the media program. 
40 This replay rights included in this metadata and/or the 
broadcast time of the program material can be used to 
derive the CP key 514 that is used to further encrypt 
(already) encrypted program material. 
[0069] The program material requested for storage in- 
45 to the media storage device includes the further encrypt- 
ed version of the encrypted program material and the 
CWP 506. This further encrypted data is not decrypted 
until the user starts the playback of the program from 
the media storage device. 
so [0070] Once playback is initiated, the further encrypt- 
ed data and the encrypted CWP 506 is decrypted using 
the CP key 514. The decrypted CWP 506 is provided to 
the CAM 406. The CAM 406 decrypts the CWP 506, and 
provides the resulting CW 538 to a broadcast decryption 
55 module to decrypt the encrypted program material. 
[0071 ] The present invention protects the data stored 
in the media storage device from pirates and does not 
expose the program material in an unencrypted form un- 
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til the viewer has requested (and paid for) the program 
material. Further, this is accomplished without introduc- 
ing additional CAM 406 functions. By using the metada- 
ta to derive a CP key 51 4 to scramble the encrypted pro- 
gram data and CAM 406, the present invention provides 5 
additional security, while providing a growth path permit 
more advanced pay per view features The foregoing de- 
scription of the preferred embodiment of the invention 
has been presented for the purposes of illustration and 
description. It is not intended to be exhaustive or to limit 10 
the invention to the precise form disclosed. Many mod- 
ifications and variations are possible in light of the above 
teaching. For example, the encryption functions de- 
scribed herein could be performed by separate encryp- 
tion/decryption modules, or a single multi-purpose en- is 
cryption/decryption module can be utilized to perform 
the encryption/decryption functions of many separate 
modules. 

[0072] The foregoing description of the preferred em- 
bodiment of the invention has been presented for the 20 
purposes of illustration and description. It is not intended 
to be exhaustive or to limit the invention to the precise 
form disclosed. Many modifications and variations are 
possible in light of the above teaching. It is intended that 
the scope of the invention be limited not by this detailed 25 
description, but rather by the claims appended hereto. 
The above specification, examples and data provide a 
complete description of the manufacture and use of the 
composition of the invention. Since many embodiments 
of the invention can be made without departing from the 30 
spirit and scope of the invention, the invention resides 
in the claims hereinafter appended. 



Claims 35 

1. A method of storing program material for subse- 
quent replay, comprising the steps of: 

receiving a data stream comprising the pro- 40 
gram material encrypted according to a first 
(CW) encryption key and control data, the con- 
trol data comprising the first (CW) encryption 
key and being encrypted; 

further encrypting the encrypted program ma- 45 
terial (504) according to a second encryption 
key (514); 

encrypting the second encryption key (51 4) ac- 
cording to a third encryption key (518) to pro- 
duce a fourth encryption key (520); and so 
storing the further encrypted program material 
(51 0) and control data and the fourth encryption 
key (520). 

2. The method of claim 1, further comprising the steps 55 
of: 

retrieving the stored further encrypted program 



material (510), control data and the fourth en- 
cryption key (520); 

decrypting the fourth encryption key (520) us- 
ing the third encryption key (51 8) to produce the 
second encryption key (514); 
decrypting the further encrypted program ma- 
terial (510) with the second encryption key 
(514) to produce the encrypted program mate- 
rial (504); 

decrypting the control data to produce the first 
(CW) encryption key; and 
decrypting the encrypted program material 
(504) using the first (CW) encryption key 

3. The method of claim 2, further comprising the steps 
of: 

accepting a PPV request before decrypting the 
encrypted program material using the first (CW) 
encryption key; and 

recording billing information regarding the pro- 
gram material. 

4. The method of claim 2, further comprising the steps 
of: 

further encrypting the control data according to 

the second encryption key (514); 

storing the further encrypted control data (512); 

and 

decrypting the further encrypted control data 
(512) according to the second encryption key 
(514). 

5. The method of claim 1 , wherein the data stream fur- 
ther comprises metadata describing program mate- 
rial replay rights. 

6. The method of claim 5, wherein the second encryp- 
tion key (514) is derived at least partially from the 
metadata. 

7. The method of claim 6, wherein the second encryp- 
tion key (514) is derived at least partially from the 
broadcast time of the program material. 

8. The method of claim 7, further comprising the slep 
of augmenting the second encryption key (51 4) with 
at least a portion of the metadata before encrypting 
the second encryption key (514) according to the 
third encryption key (518). 

9. The method of claim 8, further comprising the steps 
of: 

retrieving the stored further encrypted program 
material (510), control data and the fourth en- 
cryption key (520); 
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decrypting the fourth encryption key (520) us- 
ing the third encryption key (51 8) to produce the 
second encryption key (514) and the portion of 
the metadata; . 

decrypting the further encrypted program ma- 5 
terial (510) with the second encryption key 
(514) to produce the encrypted program mate- 
rial (504); 

accepting a PPV request; and 
determining if the PPV request is permitted us- 10 
ing the portion of the metadata; and 
decrypting the control data to produce the first 
(CW) encryption key and decrypting the en- 
crypted program material using the first (CW) 
encryption key if the PPV request is permitted. * 5 

10. A receiver (132) for storing program material for 
subsequent replay, comprising: 

a tuner (41 0), for receiving a data stream com- 20 
prising encrypted access control information 
and the program material encrypted according 
to a first (CW) encryption key, the access con- 
trol information including the first encryption 
key; 25 
a first encryption module (552), communica- 
tively coupled to the tuner (41 0) and communi- 
catively coupleable to a media storage device 
(524), for further encrypting the encrypted pro- 
gram material according to a second encryption 30 
key (514) and for encrypting the second en- 
cryption key (514) according to a third encryp- 
tion key (518) to produce a fourth encryption 
key (520); 

a first decryption module (550) communicative- 35 
ly coupleable to the media storage device 
(524), for decrypting the fourth encryption key 
(520) retrieved from the media storage device 
(524) using the third encryption key (518) to 
produce the second encryption key (514), and *o 
for decrypting the further encrypted program 
material (510) retrieved from the media pro- 
gram device (524) to produce the encrypted 
program material (514); 

a conditional access module (406) communica- 45 
tively coupled to the first decryption module 
(552), for decrypting the encrypted access con- 
trol information to produce the first (CW) en- 
cryption key; and 

a second decryption module (540), for decrypt- so 
ing the program material using the first (CW) 
encryption key. 

11. The apparatus of claim 10, wherein: 

55 

the first encryption module (552) further en- 
crypts the encrypted access control information 
according to the second encryption key (514); 



and 

the first decryption module (550) further de- 
crypts the further encrypted access control in- 
formation according to the second encryption 
key (514). 
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mation including the first encryption key; a first encryp- 
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age device (524), for further encrypting the encrypted 
program material according to a second encryption key 
(514) and for encrypting the second encryption key 
(514) according to a third encryption key (518) to pro- 
duce a fourth encryption key (520); a first decryption 
module (550) communicatively coupleable to the media 
storage device (524), for decrypting the fourth encryp- 
tion key (520) retrieved from the media storage device 
(524) using the third encryption key (518) to produce the 
second encryption key (514), and for decrypting the fur- 
ther encrypted program material (510) retrieved from 
the media program device (524) to produce the encrypt- 
ed program material (514); a conditional access module 
(406) communicatively coupled to the first decryption 
module (552), for decrypting the encrypted access con- 
trol information to produce the first (CW) encryption key; 



and a second decryption module (540), for decrypting 
the program material using the first (C W) encryption key. 
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